Lucene search
+L

216 matches found

Kitploit
Kitploit
added 2026/09/03 6:32 a.m.4 views

ViteVulScan

ViteVulScan Introducción a las vulnerabilidades Este proyecto cubre 3 vulnerabilidades: CVE-2025-30208 / CVE-2025-31125 / CVE-2025-31486, todas relacionadas con la lectura arbitraria de archivos en el servidor de desarrollo de Vite. Estas tres vulnerabilidades tienen una amplia cobertura y son...

7.5CVSS6.5AI score0.74969EPSS
SaveExploits35
Kitploit
Kitploit
added 2026/09/03 3:16 a.m.6 views

Vite-CVE-2025-30208-EXP

Herramienta de detección CVE-2025-30208 Análisis de la vulnerabilidad CVE-2025-30208 es una vulnerabilidad de lectura arbitraria de archivos en el servidor de desarrollo de Vite. Un atacante puede leer archivos sensibles del servidor como /etc/passwd o C:\windows\win.ini mediante la construcción ...

7.5CVSS6.6AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/03 2:10 a.m.4 views

CVE-2021-40978

CVE-2021-40978 explotación de directory traversal en el servidor de desarrollo integrado de mkdocs Mkdocs 1.2.2 permite el directory traversal a través del servidor de desarrollo integrado que responde en el puerto 8000. A continuación se muestran algunos ejemplos de rutas explotadas con éxito:...

7.5CVSS7.2AI score0.15103EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 9:06 p.m.4 views

CVE-2025-30208

🔥 Escáner de Vulnerabilidad de Lectura Arbitraria de Archivos en Vite CVE-2025-30208 Escáner de vulnerabilidades avanzado para CVE-2025-30208 con características de nivel empresarial Herramienta profesional de pruebas de penetración para la detección de la vulnerabilidad de lectura arbitraria de...

7.5CVSS6.6AI score0.74969EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/02 8:35 p.m.4 views

CVE-2025-31486-Simulation

Laboratorio de Path Traversal de Vite CVE-2025-31486 Un entorno de laboratorio contenedorizado y práctico para simular y explotar la vulnerabilidad de Path Traversal en el servidor de desarrollo de Vite, identificada como CVE-2025-31486. 📖 Acerca de la vulnerabilidad Este laboratorio demuestra un...

5.3CVSS6.7AI score0.40175EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/02 5:42 p.m.2 views

Path-Transversal-CVE-2025-31125-

Vite Exploit CVE-2025-31125 Описание: Эксплуатирует обход пути path traversal в конечной точке @fs сервера разработки Vite CVE-2025-31125 для доступа к конфиденциальным файлам, таким как /etc/passwd и /etc/hosts, через специально созданные URL. Создан Harsh Gupta. Использование: python...

7.5CVSS6.5AI score0.58462EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 11:35 a.m.3 views

Vitejs-exploit

Vite Exploit CVE-2025-31125 Descripción: Explota el path traversal en el endpoint @fs del servidor de desarrollo de Vite CVE-2025-31125 para acceder a archivos sensibles como /etc/passwd y /etc/hosts mediante URLs manipuladas. Creado por Muhammad Waseem. Uso: python viteexploit.py -u...

7.5CVSS6.5AI score0.58462EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/02 10:31 a.m.4 views

CVE-2025-29927

CVE-2025-29927 en Next.js 15.2.0 Cómo ejecutar: root@kitploit: git clone https://github.com/nyctophile0969/CVE-2025-29927 cd CVE-2025-29927 npm install [email protected] npm run dev...

9.1CVSS6.9AI score0.99225EPSS
SaveExploits58
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.187 views

NestJS DevTools Integration - Remote Code Execution

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

9.4CVSS7.7AI score0.49994EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/02 3:48 a.m.3 views

cve-2024-3435

Este es un proyecto Next.js iniciado con create-next-app. Comenzando Primero, ejecuta el servidor de desarrollo: root@kitploit: npm run dev or yarn dev or pnpm dev or bun dev Abre http://localhost:3000 con tu navegador para ver el resultado. Puedes empezar a editar la página modificando...

8.4CVSS7.2AI score0.00825EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/02 1:25 a.m.5 views

CVE-2026-39363

CVE-2026-39363 Vulnerabilidad de Lectura Arbitraria de Archivos en el WebSocket del Servidor de Desarrollo de Vite Resumen de la Vulnerabilidad...

8.2CVSS5.9AI score0.03396EPSS
SaveExploits4
OSV
OSV
added 2026/09/01 9:26 p.m.2 views

CVE-2026-84373 Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock

Vitest is a testing framework powered by Vite. From 2.1.0 until 4.1.11 and 5.0.0-rc.2, the public mockerPlugin and standalone interceptorPlugin exports in packages/mocker/src/node/interceptorPlugin.ts register the vitest:interceptor:register handler on Vite's unauthenticated HMR WebSocket without...

5.9CVSS5.9AI score
SaveExploits0References10
Kitploit
Kitploit
added 2026/08/29 5:27 p.m.3 views

CVE-2025-30208

🔥 Scanner di Vulnerabilità del Server di Sviluppo Vite CVE-2025-30208 🚀 Panoramica Questo strumento scansiona per CVE-2025-30208, una vulnerabilità nel Server di Sviluppo Vite. Permette ai ricercatori di sicurezza di rilevare rapidamente istanze vulnerabili utilizzando multipli payload. ⚡...

7.5CVSS6.6AI score0.74969EPSS
SaveExploits28References1
Kitploit
Kitploit
added 2026/08/29 5:05 p.m.5 views

CVE-2025-55182-React-19.2.0

Passaggi di sfruttamento: 1. Scarica tutti i file in questo repository 2. Estrai file.zip e nominalo rh-test 3. Eseguilo usando npm run dev o yarn dev o pnpm dev o bun dev. 4. Apri http://localhost:3000 nel browser 5. Apri un nuovo terminale ed esegui il comando python3 react-exp.py...

10CVSS7AI score0.99802EPSS
SaveExploits389
Github Security Blog
Github Security Blog
added 2026/08/11 3:32 p.m.10 views

Duplicate Advisory: Nuxt dev server discloses project root and workspace UUID via the Chrome DevTools workspace endpoint

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7c4v-fwgw-9rf7. This link is maintained to preserve external references. Original Description Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development...

6.9CVSS5.2AI score0.00135EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2026/08/11 1:19 p.m.15 views

CVE-2026-72744

Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json. The endpoint's local-request gate isLocalDevRequest is header-based and trusts the...

6.9CVSS0.00135EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/11 12:16 p.m.6 views

CVE-2026-72744 Nuxt before 4.5.1 Information Disclosure via Chrome DevTools

Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json. The endpoint's local-request gate isLocalDevRequest is header-based and trusts the...

6.9CVSS5.3AI score0.00135EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/11 12:16 p.m.39 views

CVE-2026-72744 Nuxt before 4.5.1 Information Disclosure via Chrome DevTools

Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json. The endpoint's local-request gate isLocalDevRequest is header-based and trusts the...

6.9CVSS0.00135EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/11 12:16 p.m.46 views

CVE-2026-72744

Nuxt.js development server vulnerability (CVE-2026-72744) affects Nuxt versions 4.4.7–4.5.0 and 3.21.7–3.21.9. The Chrome DevTools workspace endpoint (GET /.well-known/appspecific/com.chrome.devtools.json) trusts the Host header to determine local requests, allowing unauthenticated LAN attackers ...

6.9CVSS5.3AI score0.00135EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/11 12:16 p.m.7 views

CVE-2026-72744

Nuxt versions = 4.4.7 and = 3.21.7 and 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint GET /.well-known/appspecific/com.chrome.devtools.json. The endpoint's local-request gate isLocalDevRequest is header-based and trusts the...

6.9CVSS5.3AI score0.00135EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder